QUESTION 105How many times was a read-only string used to attempt a write operation?

A. 6B. 9C. 4D. 3E. 2

Answer: B

QUESTION 106What can the SMTP preprocessor in a FirePOWER normalize?

A. It can extract and decode email attachments in client to server trafficB. It can look up the email senderC. it compares known threats to the email senderD. It can forward the SMTP traffic to an email filter serverE. It uses the Traffic Anomaly Detector

Answer: A

QUESTION 107You want to allow all of your companies users to access the Internet without allowing other Web servers to collect the IP addresses of individual users. What two solutions can you use? (Choose two).

A. Configure a proxy server to hide users local IP addressesB. Assign unique IP addresses to all users.C. Assign the same IP addresses to all usersD. Install a Web content filter to hide users local IP addressesE. Configure a firewall to use Port Address Translation.

QUESTION 111If a switch receives a superior BPDU and goes directly into a blocked state, what mecanism must be in use?

A. Etherchannel guardB. root guardC. loop guardD. BPDU guard

Answer: DExplanation:The key here is the word ‘switch’. The entire switch goes into a blocked state, meaning that it can’t participate in STP, it is blocked. Root guard basically puts the port in a listening state rather than forwarding, still allowing the device to participate in STP.

Answer: ABExplanation:Security Information Event Management SIEM+ Log collection of event records from sources throughout the organization provides important forensic tools and helps to address compliance reporting requirements.+ Normalization maps log messages from different systems into a common data model, enabling the organization to connect and analyze related events, even if they are initially logged in different source formats.+ Correlation links logs and events from disparate systems or applications, speeding detection of and reaction to security threats.+ Aggregation reduces the volume of event data by consolidating duplicate event records.+ Reporting presents the correlated, aggregated event data in real-time monitoring and long-term summaries.Source: http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-smart-businessarchitecture/sbaSIEM_deployG.pdf